gave.sbm.no

- SPAREBANKEN MØRE -

Issued by Buypass Class 3 CA 2

About this certificate

This digital certificate with serial number 4b:84:44:2b:8d:57:2a:dc:57:7e was issued on by Buypass AS-983163327.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

SPAREBANKEN MØRE

Company registration number: 937899319
Organization: SPAREBANKEN MØRE
Postal code: 6003
Locality: ÅLESUND
Country: NO

Buypass AS-983163327

Organization: Buypass AS-983163327
Country: NO

This certificate will expire on

Certificate Details

Serial Number (hex): 4b:84:44:2b:8d:57:2a:dc:57:7e
Serial Number (int): 356617368608177150252926
Serial Number lenght: 79 bits, 10 octets

SubjectKeyId: 6d:54:92:ab:2c:06:21:97:b7:46:4e:6f:56:80:a9:fc:27:e6:bd:90
AuthorityKeyId: 22:30:2e:d2:fb:f6:4b:ca:c0:b8:3b:d2:04:c4:e9:72:e6:97:9b:0c

Fingerprint (sha1): ea:4e:aa:a4:8f:57:cb:c3:cc:1c:cc:49:85:10:bb:df:a5:32:a2:09
Fingerprint (sha256): 7d:d4:58:85:c3:94:99:aa:f1:a1:1e:10:9f:05:07:e6:9f:94:07:9a:81:ae:c7:9f:c3:47:c8:88:30:92:97:70

Issuing Certificate URL: http://crt.buypass.no/crt/BPClass3CA2.cer

Revocation information

OCSP Server: http://ocsp.buypass.com
CRL Distribution Point: http://crl.buypass.no/crl/BPClass3CA2.crl

Check the revocation status for certificate gave.sbm.no

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gave.sbm.no

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gave.sbm.no
engasjert.sbm.no

Other certificates including the domain name sbm.no

(limited to 100 certificates)
mi.sbm.no
www.sbm.no
nettbank.sbm.no
www.sbm.no
sbm.sbm.no
mi.sbm.no
www.sbm.no
sip.sbm.no
www.sbm.no
pureservice.sbm.no
post.sbm.no
www.sbm.no
sbm.sbm.no
workbench.posit.sbm.no
sip.sbm.no
pureservice.sbm.no
khb.sbm.no
www.sbm.no
nettbank.sbm.no
rapporter.sbm.no
smartbank.sbm.no
gave.sbm.no
gave.sbm.no
smartbank.sbm.no
sentry.sbm.no
sbm.sbm.no
competella.sbm.no
www.sbm.no
www.sbm.no
www.sbm.no
nettbank.sbm.no
smartbank.sbm.no
www.sbm.no
sentry.sbm.no
www.sbm.no
nettbank.sbm.no
rp.sbm.no
www.sbm.no
www.sbm.no
smartbank.sbm.no
www.sbm.no
weboffice.sbm.no
rapporter.sbm.no
smartbank.sbm.no
rapporter.sbm.no
gave.sbm.no
nettbank.sbm.no
rapporter.sbm.no
www.sbm.no
post.sbm.no
kontor.sbm.no
packagemanager.posit.sbm.no
nettbank.sbm.no
nettbank.sbm.no
www.sbm.no
mi.sbm.no
sip.sbm.no
post.sbm.no
webmail.sbm.no
sts.sbm.no
gave.sbm.no
connect.posit.sbm.no
forvaltning.sbm.no
post.sbm.no
kontor.sbm.no
rapporter.sbm.no
post.sbm.no
sip.sbm.no
rapporter.sbm.no
openbanking.sbm.no
www.sbm.no
nettbank.sbm.no
staging.sbm.no
wealthmapper.sbm.no
epost.sbm.no
post.sbm.no
rapporter.sbm.no
www.sbm.no
pureservice.sbm.no
mi.sbm.no
sbm.sbm.no
forvaltning.sbm.no
www.sbm.no

Certificate

The complete raw certificate details for gave.sbm.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 356617368608177150252926
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Buypass AS-983163327'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Buypass Class 3 CA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-11 06:59:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-06 22:59:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ÅLESUND'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '6003'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SPAREBANKEN MØRE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'gave.sbm.no'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '937899319'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 989239174824166356430835825774690979137713093679038116564394852483216927133834852168720010807121966719801022300791265432961537859920267834440650398853914636849982128887734968451899919553753436748946905801495178558773209098356366104264102628781631552444365665601540141941753200031814936798273010526305063046215060624616931096780572425459757015498850024046266980111576949596103843030170709168297924689317653495287083036950475894480563658260538387837751346373247739830345587933178478216393994599012026254297283477342958672431558735473817801962527656479142488721640707513560386131923533021227770265880613928044360296990638418158592939780425884277052289458640754124346005664085072631347956892915713765196601304527134946477040209707972587156777409641429257280523888926150199727607039605066422866338966535550250969737965151550060376879110978199619254357068270231195351973728190323678268948113420861912756881014104243833698341456415497178486120792865159084852961825387042793946013046036359802322152411716112977435904705530389245438010984976632129119897150529257849076614755878759745636266081457318007270396370872692897395899060157384620849995887399161089896070470119502658862940465248870883378856375676210095055627844664122041934895969012961
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 22302ed2fbf64bcac0b83bd204c4e972e6979b0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6d5492ab2c062197b7464e6f5680a9fc27e6bd90
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (107 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.578.1.26.1.3.3 (BuyPass EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.buypass.no/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.buypass.no/cps'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.buypass.no/crl/BPClass3CA2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gave.sbm.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engasjert.sbm.no'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.buypass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.buypass.no/crt/BPClass3CA2.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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